[dependabot]

Bumps the actions group with 2 updates: astral-sh/setup-uv and CodSpeedHQ/action.

Updates astral-sh/setup-uv from 10.3.2 to 10.3.3

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

• Use Astral mirror for version manifests with GitHub fallback @​eifinger (#1119)
• fix: allow whitespace in uv requirement specifiers @​soujasK (#1112)
• fix: resolve ~= specifiers with PEP 440 semantics @​soujasK (#1111)
• fix: only report a saved cache when saving succeeded @​soujasK (#1110)

🧰 Maintenance

• chore: update known checksums for 0.13.6 @github-actions[bot] (#1117)

📚 Documentation

• docs: use JSDoc for compatible release specifier comment @​eifinger (#1113)
• docs: update version references to v10.3.2 @github-actions[bot] (#1104)

Commits

• 68559e9 Use Astral mirror for version manifests with GitHub fallback (#1119)
• 0192b69 chore: update known checksums for 0.13.6 (#1117)
• 2f29784 docs: use JSDoc for compatible release specifier comment (#1113)
• 9c73321 fix: allow whitespace in uv requirement specifiers (#1112)
• 80fbe01 fix: resolve ~= specifiers with PEP 440 semantics (#1111)
• 36b7b57 fix: only report a saved cache when saving succeeded (#1110)
• 56618ca docs: update version references to v10.3.2 (#1104)
• See full diff in compare view

Updates CodSpeedHQ/action from 5.6.0 to 5.6.3

Release notes

Sourced from CodSpeedHQ/action's releases.

v5.6.3

Bumps the CodSpeed runner to v5.6.3, including v5.6.2.

Highlights

Go benchmark times match go test

b.Loop() benchmarks that stop and restart the timer inside an iteration now report all of their timed work. A round previously counted only the time since the most recent StartTimer, so results for those benchmarks will move.

Unsupported go test flags no longer fail the run

go test -p 1 ./... -bench . used to strip -p, parse 1 as a package, and fail with package 1 is not in std after every benchmark had passed. Flags and their values are now dropped together.

Fixed randomness in CPU Simulation

getrandom(), /dev/urandom, AT_RANDOM and hardware RNG instructions now return the same values on every CPU Simulation run, removing one source of run-to-run variance.

Fixes

• Simulation: fix SIGILL on arm64 when programs read previously unsupported CPU ID registers or TPIDRRO_EL0 (#59).
• Go: benchmarks that draw from the global math/rand now start from the same seed on every run, so their results no longer vary between runs (#596).

🚀 Features

• Seed Go's global math/rand deterministically (#596) by @​not-matthias in #596
• Always enable deterministic RNG (#600) by @​not-matthias in #600

🐛 Bug Fixes

• Bump go-runner to 1.4.0 (#605) by @​adriencaccia in #605
  • fix(cli): drop the value of unsupported go test flags by @​not-matthias in CodSpeedHQ/codspeed-go#67
  • fix(go-runner): count all timed segments of a b.Loop() iteration by @​not-matthias in CodSpeedHQ/codspeed-go#69

⚙️ Internals

• Bump pinned valgrind-codspeed to 3.26.0-0codspeed12 (#604) by @​adriencaccia in #604
  • feat: add --deterministic-rng to make client randomness reproducible by @​not-matthias in CodSpeedHQ/valgrind-codspeed#54
  • feat(vex): serve arm64 RNDR and RNDRRS with --deterministic-rng by @​not-matthias in CodSpeedHQ/valgrind-codspeed#56
  • fix(vex): decode arm64 MRS of all EL0-visible ID registers by @​not-matthias in CodSpeedHQ/valgrind-codspeed#59

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

What's Changed

• chore: bump runner version to 5.6.2 by @​github-actions[bot] in CodSpeedHQ/action#255
• chore: bump runner version to 5.6.3 by @​github-actions[bot] in CodSpeedHQ/action#256

Full Changelog: CodSpeedHQ/action@v5.6.1...v5.6.3

v5.6.1

Bumps the CodSpeed runner to v5.6.1.

... (truncated)

Commits

• af75f77 Release v5.6.3 🚀
• 3a5fe1c chore: bump runner version to 5.6.3 (#256)
• ca7c971 chore: bump runner version to 5.6.2 (#255)
• 61efe07 Release v5.6.1 🚀
• 2dea609 chore: bump runner version to 5.6.1 (#254)
• e0fab22 docs(examples): update the example workflows (#252)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (491320e) to head (1a04293).

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #326   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            4         4           
  Lines          559       559           
=========================================
  Hits           559       559           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[codspeed]

Merging this PR will not alter performance

1 warning

⚠️ 57 benchmarks are dominated by system calls

System calls cannot be simulated consistently and are left out of the measure. The reported value understates the real cost. Switch to the Walltime instrument to measure them.

Learn more about system calls

See affected benchmarks

✅ 57 untouched benchmarks
⏩ 89 skipped benchmarks¹

---

_{Comparing dependabot/github_actions/actions-eb3aa6d9cf (1a04293) with main (d1b8451)²}

Footnotes

1. 89 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on main (491320e) during the generation of this report, so d1b8451 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩